Skip to content
OpenAdvisories
Medium · 5.5 CVE-2018-10862 EUVD-2022-5534GHSA-w8r2-5j8x-x8j6

Improper Limitation of a Pathname to a Restricted Directory in WildFly

Published Jul 27, 2018 · Updated Aug 5, 2024 · Assigned by redhat

Package: org.wildfly.core:wildfly-server Ecosystem: Maven

Description

WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwrite arbitrary files. This is an instance of the 'Zip Slip' vulnerability.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 rhvm-appliance 2:4.2-20180828.0.el7 RHSA-2018:2643
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Red Hat JBoss EAP 7 eap7-activemq-artemis +15 1.5.5.013-1.redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-apache-cxf +3 3.1.16-1.redhat_1.1.ep7.el6 RHSA-2018:2276
Red Hat JBoss EAP 7 eap7-bouncycastle +3 1.56.0-5.redhat_3.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-guava +1 25.0.0-1.redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-hibernate +5 5.1.15-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-ironjacamar +8 1.4.10-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-jberet +1 1.2.6-2.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-jboss-ejb-client 4.0.11-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-jboss-remoting 5.0.8-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-jboss-server-migration +18 1.0.6-4.Final_redhat_4.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-mod_cluster 1.3.10-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-narayana +10 5.5.32-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-picketlink-api +9 2.5.5-13.SP12_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-resteasy +16 3.0.26-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-undertow 1.4.18-7.SP8_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-wildfly +1 7.1.3-4.GA_redhat_3.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423, RHSA-2018:2276
Red Hat JBoss EAP 7 eap7-wildfly-javadocs 7.1.4-2.GA_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-wildfly-naming-client 1.0.9-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-wildfly-openssl-linux 1.0.6-14.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-wildfly-transaction-client 1.0.4-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-wildfly-web-console-eap 2.9.18-1.Final_redhat_1.1.ep7.el6 RHSA-2018:2424, RHSA-2018:2423
Red Hat JBoss EAP 7 eap7-wss4j +6 2.1.12-1.redhat_1.1.ep7.el6 RHSA-2018:2276
Red Hat JBoss EAP 7 eap7-xml-security 2.0.10-1.redhat_1.1.ep7.el6 RHSA-2018:2276

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.wildfly.core:wildfly-server < 6.0.0.Alpha3 6.0.0.Alpha3 GHSA-w8r2-5j8x-x8j6

Advisories 4

References